Lucene search

[email protected]CVE-2023-4568

HistorySep 13, 2023 - 9:15 p.m.

CVE-2023-4568

2023-09-1321:15:07

CWE-287

[email protected]

web.nvd.nist.gov

papercut ng

xmlrpc

cve-2023-4568

unauthenticated access

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.022 Low

EPSS

Percentile

89.4%

JSON

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

CPENameOperatorVersion
papercut:papercut_ngpapercut papercut ngle22.0.12
papercut:papercut_ngpapercut papercut ngeq16.1
papercut:papercut_ngpapercut papercut ngeq9.5
papercut:papercut_ngpapercut papercut ngeq18.2.1
papercut:papercut_ngpapercut papercut ngeq13.5
papercut:papercut_ngpapercut papercut ngeq17.2.4
papercut:papercut_ngpapercut papercut ngeq18.2.5
papercut:papercut_ngpapercut papercut ngeq18.2.3
papercut:papercut_ngpapercut papercut ngeq8.5
papercut:papercut_ngpapercut papercut ngeq20.1.6

CPE	Name	Operator	Version
papercut:papercut_ng	papercut papercut ng	le	22.0.12
papercut:papercut_ng	papercut papercut ng	eq	16.1
papercut:papercut_ng	papercut papercut ng	eq	9.5
papercut:papercut_ng	papercut papercut ng	eq	18.2.1
papercut:papercut_ng	papercut papercut ng	eq	13.5
papercut:papercut_ng	papercut papercut ng	eq	17.2.4
papercut:papercut_ng	papercut papercut ng	eq	18.2.5
papercut:papercut_ng	papercut papercut ng	eq	18.2.3
papercut:papercut_ng	papercut papercut ng	eq	8.5
papercut:papercut_ng	papercut papercut ng	eq	20.1.6

Rows per page:

1-10 of 1611

References

www.tenable.com/security/research/tra-2023-31

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.022 Low

EPSS

Percentile

89.4%

JSON

Related for CVE-2023-4568

prion1 nuclei1 cvelist1